Microsoft IE NavigateComplete2 跨框架访问漏洞

漏洞信息详情

Microsoft IE NavigateComplete2 跨框架访问漏洞

• CNNVD编号：CNNVD-200006-023
• 危害等级： 低危
  
  
• CVE编号：
  CVE-2000-0503
  
• 漏洞类型：
  
  
  边界条件错误
  
• 发布时间：
  
  2000-06-06
  
• 威胁类型：
  
  
  远程
  
• 更新时间：
  
  2005-10-20
  
• 厂        商：
  
  microsoft
• 漏洞来源：
  Posted to Bugtraq …

Internet Explorer 5.01版本的WebBrowser IFRAME存在漏洞。远程攻击者借助NavigateComplete2事件可以违反跨框架的安全策略。

Microsoft Internet Explorer 4.0 for Windows NT 4.0

• Microsoft Q269368
  
  http://www.microsoft.com/windows/ie/download/critical/patch11.htm

Microsoft Internet Explorer 4.0

• Microsoft Q269368
  
  http://www.microsoft.com/windows/ie/download/critical/patch11.htm

Microsoft Internet Explorer 4.0 for Windows 95

• Microsoft Q269368
  
  http://www.microsoft.com/windows/ie/download/critical/patch11.htm

Microsoft Internet Explorer 5.0 for Windows 95

• Microsoft Q269368
  
  http://www.microsoft.com/windows/ie/download/critical/patch11.htm

Microsoft Internet Explorer 5.0 for Windows 98

• Microsoft Q269368
  
  http://www.microsoft.com/windows/ie/download/critical/patch11.htm

Microsoft Internet Explorer 5.0 for Windows NT 4.0

• Microsoft Q269368
  
  http://www.microsoft.com/windows/ie/download/critical/patch11.htm

Microsoft Internet Explorer 5.0 for Windows 2000

• Microsoft Q269368
  
  http://www.microsoft.com/windows/ie/download/critical/patch11.htm

来源: BUGTRAQ
名称: 20000606 IE 5 Cross-frame security vulnerability using IFRAME and WebBrowser control
链接:http://archives.neohapsis.com/archives/win2ksecadvice/2000-q2/0154.html

来源: BID
名称: 1311
链接:http://www.securityfocus.com/bid/1311